Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: pttK2jMSForpcQTegwFCM8SDcGHKBgEWAmMPw6CKOhk=
Subject key identifier: 9D:F0:67:B0:48:85:18:F3:AE:A0:5D:FB:C5:2B:1E:86:B8:35:22:75
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 01991E42508B9A061C86AE5F3A51772870C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 137E
Signing time: Sat 06 Sep 2025 09:01:26 +0000
Manifest this update: Sat 06 Sep 2025 09:01:26 +0000
Manifest next update: Sun 07 Sep 2025 09:01:26 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: 6jk4heMFiFhQqXpLOTrKqVQ2QH6H6zqxJjjK6Mt0r7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:42:50:8b:9a:06:1c:86:ae:5f:3a:51:77:28:70:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Sep 6 09:01:26 2025 GMT
Not After : Sep 7 09:01:26 2025 GMT
Subject: CN=9df067b0488518f3aea05dfbc52b1e86b8352275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:61:a4:7f:ce:de:ab:e7:49:c7:4d:ac:d3:
57:cc:4f:0c:8e:d8:fc:ae:bf:09:f3:e0:c4:99:fb:
77:a2:5f:d0:87:5e:34:67:e6:2e:c6:64:92:8f:66:
14:22:4c:78:dd:39:db:d4:14:63:52:db:05:4e:a8:
8e:81:6d:62:3c:da:9e:78:24:9b:6e:12:8f:2b:d9:
72:d7:11:02:20:48:96:4b:90:47:fe:0a:35:86:5b:
d9:df:59:74:7c:b9:89:b4:2a:98:d4:7d:2b:3d:4f:
6b:62:eb:dd:35:99:3f:84:d4:5d:2d:a3:db:ea:74:
11:89:f6:0e:69:e7:64:0f:19:eb:36:f3:f5:93:c0:
25:82:a0:16:a6:75:ec:45:47:a5:c9:a0:b0:5f:a9:
db:fa:85:6e:52:38:29:fe:fe:70:a5:ab:95:16:b7:
fc:5f:68:db:72:e5:47:45:61:42:5d:76:df:a8:4a:
d3:ac:b2:99:0c:83:e3:1e:07:23:cb:27:f8:0b:6b:
8a:5d:4c:77:83:81:93:50:e6:aa:d6:a8:58:33:2f:
3c:c3:0b:38:6c:1d:ce:e5:19:31:95:09:51:69:b3:
ab:c2:13:71:df:98:26:f4:df:8d:4a:c0:30:1f:30:
eb:46:f8:fc:0b:63:8a:f3:71:dd:9e:3e:e6:e9:b1:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:67:B0:48:85:18:F3:AE:A0:5D:FB:C5:2B:1E:86:B8:35:22:75
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:05:5d:d3:00:0d:04:c9:60:9f:28:65:c7:bb:f1:7f:8c:41:
d8:81:5e:55:ae:86:de:23:8d:7e:0d:2a:df:11:e1:a3:75:a1:
fd:eb:57:3e:c3:4f:cc:50:62:7b:76:e5:b7:d0:b0:a3:b6:75:
97:38:31:f7:85:29:41:ea:71:cd:33:93:14:91:0d:2f:88:a2:
a1:95:12:11:25:61:08:dd:70:ca:22:65:1d:e3:78:ca:3c:3f:
e5:91:6b:14:50:c7:ad:2e:7f:83:3f:20:4f:31:c0:ad:2d:97:
8a:d1:3b:ff:70:3a:99:a9:9c:e1:18:02:29:07:1d:c0:39:fb:
37:e7:de:eb:95:1e:b3:14:6c:1a:5c:d4:a3:f0:26:fc:01:0e:
c0:da:5d:d4:9b:3e:d9:07:dd:23:b2:aa:7c:ef:73:f0:c2:49:
0e:83:44:a5:c6:93:86:56:2f:86:58:59:c4:18:f6:b0:56:9a:
2a:6f:ce:15:c8:81:99:fc:c5:52:3d:51:08:8f:f4:5a:85:9b:
ed:24:76:89:87:f1:b4:08:92:57:7e:bb:07:ba:cf:98:4e:1f:
85:b4:bf:fb:a0:39:1d:67:c3:9f:7e:5f:1e:44:3f:cc:cf:a5:
e2:4a:d9:c9:23:6e:7f:04:9b:c7:b3:8f:b9:29:f0:8e:01:56:
d2:66:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:18:48 2025 by rpki-client